2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9442 | — | — | 2.5% | Jun 5, 2017 | BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary code by uploading a crafted package co... |
| CVE-2017-9420 | — | — | 1.3% | Jun 5, 2017 | Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attacker... |
| CVE-2017-9440 | — | — | 1.5% | Jun 5, 2017 | In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c, which allows attackers t... |
| CVE-2017-9439 | — | — | 1.5% | Jun 5, 2017 | In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to ... |
| CVE-2017-9438 | — | — | 2.6% | Jun 5, 2017 | libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service (stack consumption)... |
| CVE-2017-1000368 | — | — | 0.6% | Jun 5, 2017 | Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded newlines) in the get_proc... |
| CVE-2017-9437 | — | — | 1.3% | Jun 5, 2017 | Openbravo Business Suite 3.0 is affected by SQL injection. This vulnerability could allow remote authenticated attackers... |
| CVE-2017-9436 | — | — | 1.0% | Jun 5, 2017 | TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php. |
| CVE-2017-9435 | — | — | 1.5% | Jun 5, 2017 | Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php (search_supervisor and search_statut pa... |
| CVE-2017-9434 | — | — | 1.4% | Jun 5, 2017 | Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability in zinflate.cpp in the Inflator filte... |
| CVE-2017-8841 | — | — | 3.7% | Jun 5, 2017 | Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b30... |
| CVE-2017-8840 | — | — | 3.6% | Jun 5, 2017 | Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before f... |
| CVE-2017-8839 | — | — | 1.8% | Jun 5, 2017 | XSS via orig_url exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_38... |
| CVE-2017-8838 | — | — | 1.8% | Jun 5, 2017 | XSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380h... |
| CVE-2017-8837 | — | — | 4.9% | Jun 5, 2017 | Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-... |
| CVE-2017-8836 | — | — | 1.9% | Jun 5, 2017 | CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_... |
| CVE-2017-8835 | — | — | 61.6% | Jun 5, 2017 | SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw... |
| CVE-2017-8441 | — | — | 0.7% | Jun 5, 2017 | Elastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply Document Level Security to inde... |
| CVE-2017-8440 | — | — | 1.0% | Jun 5, 2017 | Starting in version 5.3.0, Kibana had a cross-site scripting (XSS) vulnerability in the Discover page that could allow a... |
| CVE-2017-8439 | — | — | 1.0% | Jun 5, 2017 | Kibana version 5.4.0 was affected by a Cross Site Scripting (XSS) bug in the Time Series Visual Builder. This bug could ... |
| CVE-2017-8438 | — | — | 1.0% | Jun 5, 2017 | Elastic X-Pack Security versions 5.0.0 to 5.4.0 contain a privilege escalation bug in the run_as functionality. This bug... |
| CVE-2017-1000367 | — | — | 8.0% | Jun 5, 2017 | Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_... |
| CVE-2017-9430 | — | — | 11.3% | Jun 5, 2017 | Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) o... |
| CVE-2017-9433 | — | — | 2.3% | Jun 5, 2017 | Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow ... |
| CVE-2017-9432 | — | — | 1.8% | Jun 5, 2017 | Document Liberation Project libstaroffice before 2017-04-07 has an out-of-bounds write caused by a stack-based buffer ov... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now